<?php
$flag='flag.php';
extract($_GET);
if(isset($ceshi))
{
    $content=trim(@file_get_contents($flag));
    if($ceshi==$content)
    {
       $flag = 'flag={JiMxMDY7JiM5NzsmIzEyMTsmIzY3OyYjMTA0OyYjMTExOyYjMTE3OyYjMzI7JiMxMDU7JiMxMTU7JiMzMjsmIzExNTsmIzExMTsmIzMyOyYjMTAzOyYjMTExOyYjMTExOyYjMTAwOyYjMzM7}';
    }
    else
    {
        $flag = "纳尼";
    }
}
?>
<html>
<head>
  <meta charset="UTF-8">
  <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>变量覆盖-01</title>
</head>
<body>
  <h1>仔细思考：拿到flag,flag中有你认识的人！</h1>
  <a href="source.php" target="_blank"><h2>查看源码</h2></a>
  <h2><?=$flag?></h2>
</body>
</html>
